Rajesh Pangare discovered two vulnerabilities in aide, an advanced intrusion detection system. A local attacker can take advantage of these flaws to hide the addition or removal of a file from the the report, tamper with the log output, or cause aide to crash during report
Several security issues were fixed in Request Tracker.
Several security issues were fixed in Sidekiq.
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure.
qs could be made to crash if it received specially crafted network traffic.
Changes in v1.4.13: server: Cover edge-case in the EventFilter validation client: Cover edge-case in the UserTokenPolicy validation arch: Process delayed callbacks immediately via the nextCyclicTime plugins: Fixed memleak for scandir in OpenSSL SecurityPolicies
Changes in v1.4.13: server: Cover edge-case in the EventFilter validation client: Cover edge-case in the UserTokenPolicy validation arch: Process delayed callbacks immediately via the nextCyclicTime plugins: Fixed memleak for scandir in OpenSSL SecurityPolicies
2.1900 [Fixed] – CVE-2025-40918 (Insecure source of randomness), required addition of dependency on Crypt::URandom [Changed] – Modules Authen::SASL::Perl::CRAM_MD5, Authen::SASL::Perl::DIGEST_MD5 and Authen::SASL::CRAM_MD5 marked as deprecated based on the respective RFC
51 queries. 8.75 mb Memory usage. 0.627 seconds.